A cookie is a textual element that is inserted into the hard disk of a computer only after authorization. Cookies have the function of streamlining web traffic analysis or signalling when a specific website is visited and allow web applications to send information to individual users. No user’s personal data is acquired by the website in this regard. We do not use cookies to transmit personal information, nor do we use the so-called persistent cookies, i.e. systems for tracking users. The use of the so-called session cookies is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to enable the safe and efficient browsing of the website. The so-called session cookies used on the website avoid resorting to other computer techniques that are potentially prejudicial to the confidentiality of user navigation and do not allow the acquisition of personal data identifying the user.

Apart from the information specified for browsing data, the user is free to provide personal data to request the services offered by the Controller. Failure to provide such data may make it impossible to obtain what has been requested.

Personal data are processed by automated tools for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are adopted to prevent the loss of data, illicit or incorrect use and unauthorized access. The data are kept for the time strictly necessary for the pursuit of the purposes specified in this information and will be deleted at the end of this period, unless the data must be kept for legal obligations or to enforce a right in court.

Within the limits and under the conditions provided for by law, the data controller is obliged to respond to requests from the data subject regarding personal data concerning him/her. In particular, according to current legislation:

1. The data subject shall have the right to obtain confirmation from the data controller as to whether or not personal data concerning him/her are being processed, and if so, to obtain access to the personal data and the following information:
• the purposes of the processing;
• the categories of personal data concerned;
• the recipients or categories of recipients to whom the personal data have been or will be communicated;
• where possible, the expected period of retention of the personal data or, if this is not possible, the criteria used to determine this period;
• the existence of the data subject's right to request to the data controller the rectification or erasure of personal data or the restriction of the processing of personal data concerning him/her or to object to the processing of such data;
• the right to lodge a complaint with a supervisory authority;
• where the data are not collected from the data subject, all available information on their origin;
• the existence of an automated decision-making process, including profiling.

 

2. The data subject shall have the right to obtain from the controller the rectification of inaccurate personal data concerning him/her without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, also by providing a supplementary declaration.
3. The data subject has the right to obtain from the data controller the erasure of personal data concerning him/her without undue delay, and the data controller has the obligation to erase the personal data without undue delay within the limits and in the cases provided for by current legislation.The data controller shall inform each of the recipients to whom the personal data have been transmitted of any rectification or erasure or limitation of processing within the limits and in the forms provided for by current legislation.
4. The data subject has the right to obtain the limitation of processing from the controller.
5. The data subject has the right to receive any personal data concerning him/her that has been provided to a Data Controller in a structured, commonly used and machine-readable format, and has the right to have such data transmitted to another Data Controller without hindrance by the Data Controller to whom he/she has provided it.
6. The data subject has the right to oppose the processing at any time and also in the case of processing for direct marketing purposes.
7. The data subject has the right to oppose an automated decision-making process relating to individuals, including profiling.
8. The data subject has the right to withdraw the consent at any time without prejudice to the lawfulness of the processing based on the consent given prior to the revocation.
9. The data subject has the right to propose a complaint to a supervisory authority.

Requests should be sent to the Data Controller at the following e-mail address: info@cifaong.it

This version of the information on the processing of personal data was updated on April, 2022.